JP6377537B2 - Power system monitoring apparatus, power system monitoring method, and power system monitoring program - Google Patents

Description

  Embodiments described herein relate generally to a power system monitoring apparatus, a power system monitoring method, and a power system monitoring program installed in a power supply command station, a system control command station, or the like.

  Conventionally, a power system monitoring system that monitors and controls the state of a power system has adopted a technique for improving fault tolerance by making a monitoring server that is a computer redundant in one site that is a unit of a jurisdiction area. However, there are situations where it is difficult to continue monitoring and controlling the power system at only one site, such as when a large-scale disaster occurs. For this reason, the need to back up monitoring control by computers in systems at other sites has become apparent. Compared to the conventional technology, a large-capacity information transmission network can be realized with the development of communication technology.

  For this reason, cases in which a wide-area power system monitoring system is constructed by linking computers in a monitoring system at a plurality of sites through a large-capacity information transmission network are increasing. In such a system, when a computer failure occurs at any site, this failure is detected at another site. Then, backup operation can be performed immediately by a computer at another site.

  Furthermore, conventionally, research has been conducted on backup operation means in the event of an abnormality, smoothing of backup operation, and ensuring database integrity during execution of backup operation.

JP 2002-034180 A

  On the other hand, conventionally, a method for online linkage function testing has not been studied. For this reason, for example, when a test for monitoring a computer failure is performed during system operation, there is a problem that a power system monitoring system at another site responds even if an actual failure occurs. In other words, the online monitoring function test in a system in an operational state is difficult to execute because it greatly affects the operation of the system.

  In order to cope with this, a function for simulating transmission / reception of online monitoring function information has been prepared in the system. For example, a debugging system equivalent to an actually operated power system monitoring system was prepared, and a test for simulating an online function was performed using this debugging system. In other words, in most cases, the system was not actually linked, but a pseudo linkage function test was performed and training was performed based on this.

  However, in recent power system monitoring systems, there are an increasing number of cases where additional linkages with other systems and linkage devices are planned after the start of system operation using a wide area IP network. In such a case, it is necessary to execute an online function test in order to confirm the linkage between the systems and the devices. In other words, there is a strong demand for confirming linked functions such as computer fault monitoring by a test on the power system monitoring system actually operated. However, as described above, the online linkage function test is difficult to execute.

  Embodiments of the present invention have been proposed to solve the above-described problems of the prior art, and power system monitoring capable of executing an online linkage function test without affecting actual system operation. An apparatus, a power system monitoring method, and a power system monitoring program are provided.

  In order to solve the above-described problem, a power system monitoring apparatus according to an embodiment of the present invention is connected to a monitoring server, which is a computer that is connected via an information transmission network and monitors and controls the power system. Based on the information acquisition unit that acquires failure information indicating that a failure has occurred in the test, and the information that indicates whether or not the test use set in each monitoring server is possible, failover is performed for the failure during monitoring control. A determination unit that determines a monitoring server that is under monitoring control as a monitoring server to be executed, and that determines a monitoring server that can be used as a test as a monitoring server that performs failover for a failure in a test, To do.

  Note that the present embodiment can also be understood as a method for realizing the functions of the above-described units by a computer or an electronic circuit, and a program to be executed by the computer.

It is a block diagram which shows 1st Embodiment. It is a block diagram which shows the determination part and selection part in 1st Embodiment. It is a flowchart which shows the procedure of the determination process of the failover computer in 1st Embodiment. It is a flowchart which shows the procedure of the selection process of the failover computer in 1st Embodiment. It is a table | surface which shows the example of the failover execution priority in each monitoring server. It is a schematic diagram which shows the example of an online type | system | group failover computer determination. It is a schematic diagram which shows the example of the failover computer determination of a test type | system | group. It is a block diagram which shows 2nd Embodiment. It is a block diagram which shows the management server of 3rd Embodiment. It is a block diagram which shows the monitoring server of 3rd Embodiment. It is a block diagram which shows the monitoring server of 4th and 5th embodiment. It is a block diagram which shows 4th Embodiment. It is a block diagram which shows 5th Embodiment. It is a block diagram which shows 6th Embodiment.

[First Embodiment]
[Constitution]
(overall structure)
The configuration of a system to which the present embodiment is applied (hereinafter referred to as the present system) is shown in FIG. In this system, a plurality of monitoring servers 1, 2, 3... Are connected via an information transmission network 4. The monitoring servers 1, 2, 3,... Are computers that monitor and control the power system. Hereinafter, the monitoring servers 1, 2, 3,... In the following description, the monitoring server S may be called a computer. In particular, its own monitoring server S is called its own computer, and the other monitoring server S is called another computer.

  Supervisory control refers to controlling the power system by outputting various control commands in accordance with external information such as the status of various devices in the power system and the detection values from various detectors. . For this reason, the monitoring server S is basically not shown, but an acquisition unit that acquires information from the outside, a calculation unit that performs a control calculation based on the acquired information, and a control according to the calculation result of the calculation unit It has an output part which outputs a command.

  The information transmission network 4 includes a wide range of networks capable of exchanging information. As the transmission path used for the information transmission network 4, any wired or wireless transmission medium can be applied, and it does not matter what LAN or WAN is used. Any communication protocol that can be used at present or in the future can be applied. Any device or program that can be used at present or in the future can be applied to an interface for transmitting and receiving information via a network. In the following description, the exchange of information with the outside via the information transmission network 4 is expressed as transmission, output, notification, reception, input, acquisition, and the like.

  Furthermore, the monitoring server S in this embodiment includes a flag setting unit 11, a setting status storage unit 12, a setting status acquisition unit 13, a comparison unit 14, an information acquisition unit 15, a determination unit 16, a priority order storage unit 17, and a determination unit 18. An execution unit 19, an HMI output unit 20, and a failure information transmission unit 21.

  The flag setting unit 11 is a processing unit that sets and cancels the test use flag for each monitoring server S. In the present embodiment, the flag setting unit 11 sets and cancels the test use flag for the own computer. The test use flag is information indicating that each monitoring server S can use the test. The test availability means that the monitoring server S under test can be a target for failover when a failover occurs due to a failure as a test. Failover means that when a failure occurs in the monitoring server S, another monitoring server S takes over the function and continues processing.

  The monitoring server S is at least online, tested, and stopped. The term “online” refers to a state where the actual power system is being operated for monitoring and control, that is, during monitoring and control. The monitoring server S in which the test use flag is not set is online. The test means testing whether various functions work normally based on information simulating various information in an actual power system. For example, in a failure test, a test is performed using failure information that simulates a failure. In addition, the test includes training performed to increase the proficiency level of personnel involved in the operation of the power system monitoring system. Stopping means stopping the operation due to failure or maintenance.

  In the present embodiment, when a failure occurs while each monitoring server S is online, the online monitoring server S in which the test use flag is not set performs failover. In addition, when a failure occurs as a test during each test, each monitoring server S in which the test use flag is set performs a failover.

  The setting status storage unit 12 is a storage unit that stores the setting status of the test use flag of each monitoring server S including its own computer in this system. The setting status acquisition unit 13 is a processing unit that acquires the setting status of the test use flag of another monitoring server S in the system. The acquired setting status is stored in the setting status storage unit 12. The comparison unit 14 is a processing unit that compares the flag setting statuses of the own computer and other computers and determines whether or not they match.

  The information acquisition unit 15 is a processing unit that acquires the status of other computers in the system as online system information 31 via the information transmission network 4. In particular, the information acquisition unit 15 of the present embodiment acquires failure information 32 indicating that a failure has occurred in the monitoring server S while online or in a test via the information transmission network 4. That is, the online system information 31 includes failure information 32 in other computers. The failure information 32 may be online failure information or failure information as a test. Further, it is assumed that the failure information 32 includes information that can distinguish the degree of failure. Simply, it includes information on whether processing can be continued or whether processing is difficult and failover is necessary.

  The determination unit 16 is a processing unit that determines whether or not failover is necessary based on the failure information 32. That is, the determination unit 16 determines whether or not failover is necessary based on the degree of a failure that has occurred in the own computer or another computer. The priority order storage unit 17 is a storage unit that stores the priority order of the monitoring server S that performs failover. In this priority order, data is always equivalent among all the monitoring servers S in the system so that no wrinkle occurs in the system.

  The determination unit 18 determines the monitoring server S that is under monitoring control as the monitoring server S that performs failover for an online failure based on the setting state of the test use flag, and performs failover for the failure in the test. It is a processing unit that determines a monitoring server S that can be used as a test as the monitoring server S to be executed. In the present embodiment, the determination unit 18 compares the test use flag between the own computer and the other computer, and determines the monitoring server S that performs failover depending on whether or not they match. Details of the determination unit 18 will be described later.

  The execution unit 19 is a processing unit that executes processing to take over the online or test monitoring control when the own computer performs failover. The HMI output unit 20 is a processing unit that performs display notification to the HMI in order to notify the operator of the computer that performs failover and performs failover. Although not shown, an HMI (human interface) is an output device and an input device connected to the monitoring server S.

  The output device is a device that outputs information to be processed by each unit of the monitoring server S so that an operator or the like can recognize the information. The output device includes any output means that can be used at present or in the future, such as a display device or a printer.

  The input device is a device for inputting information necessary for processing of each unit of the monitoring server S, selecting processing and inputting instructions. The input device includes any input means that can be used now or in the future, such as a keyboard and a mouse.

  The failure information transmission unit 21 is a processing unit that transmits the failure information 32 to other computers when a failure occurs in the own computer or when a test simulating the failure is executed. The failure information 32 is acquired as online system information 31 by the information acquisition unit 15 in another computer.

(Decision part)
As illustrated in FIG. 2, the determination unit 18 includes a notification acquisition unit 181, a comparison result acquisition unit 182, a selection unit 183, an impossibility notification unit 184, an execution notification unit 185, and an HMI notification unit 186.

  The notification acquisition unit 181 is a processing unit that acquires a notification of necessity of failover from the determination unit 16. The comparison result acquisition unit 182 is a processing unit that acquires, from the comparison unit 14, a comparison result of the setting status of the test use flag between the own computer and another computer that has output the failure information 32.

  The failure notification unit 184 is a processing unit that outputs a failover failure notification when it is determined in the comparison result that the setting status of the test use flag does not match. The failover impossibility notification is information indicating that the own computer cannot perform failover in relation to the computer in which the failure has occurred.

  The selection unit 183 is a processing unit that selects the monitoring server S that performs failover based on the priority order set for each monitoring server S. When it is determined that the comparison results by the comparison unit 14 match, the selection unit 183 in the present embodiment selects the own computer or another computer based on the priority order.

  The selection unit 183 includes a priority order acquisition unit 1831, a priority order determination unit 1832, an availability inquiry unit 1833, a priority order change unit 1834, an execution availability determination unit 1835, a computer determination unit 1836, and a notification output unit 1837.

  The priority order acquisition unit 1831 is a processing unit that acquires the priority order data stored in the priority order storage unit 17. The priority determination unit 1832 is a processing unit that determines whether or not the computer having the highest priority is the own computer based on the acquired priority data.

  The availability inquiry unit 1833 is a processing unit that inquires whether or not failover can be executed to the highest computer when the priority determination unit 1832 determines that the own computer is not the highest. The priority changing unit 1834 is a processing unit that excludes the computer from the priority order when the availability inquiry unit 1833 receives a notification that failover cannot be performed from the highest-level computer. In this case, the priority order determination unit 1832 determines the next highest order computer as the highest order computer.

  The execution availability determination unit 1835 is a processing unit that determines whether the monitoring server S can execute failover. In this embodiment, when the own computer is at the highest priority, it is determined whether or not failover can be executed. The computer determination unit 1836 is a processing unit that, when the availability inquiry unit 1833 receives a notification that failover can be executed from the highest-level computer, determines the computer as a computer that executes failover. The computer determining unit 1836 determines the computer as a computer that performs failover even when the execution possibility determining unit 1835 determines that the own computer can perform failover.

  The computer determination unit 1836 outputs the execution computer information 33 (see FIG. 4) to the execution notification unit 185 when the computer that executes failover is determined to be its own computer. The notification output unit 1837 is a processing unit that outputs a non-executable notification to the non-performing notification unit 184 when the execution possibility determining unit 1835 determines that failover cannot be performed.

  When the execution computer information 33 is input from the computer determination unit 1836, the execution notification unit 185 is a processing unit that transmits the information to other computers. At the same time, the execution notification unit 185 notifies the execution unit 19 of the execution computer information 33. On the other hand, when the computer determination unit 1836 determines that another computer performs failover, the execution notification unit 185 does not notify the execution unit 19. The HMI notification unit 186 notifies the HMI output unit 20 of information on a computer that performs failover, regardless of whether the own computer or another computer performs failover.

  The monitoring server S as described above can be realized by controlling a computer, that is, a computer with a predetermined program. The program in this case realizes the processing of each unit as described above by physically utilizing a computer hard wafer. How to set the range to be processed by hardware and the range to be processed by software including a program is not limited to a specific mode.

  Furthermore, although not shown, the monitoring server S includes a storage unit that stores various types of information necessary for processing of each unit in addition to the setting status storage unit 12 and the priority order storage unit 17. For example, the storage unit stores information on whether or not each monitoring server S can execute failover. In addition, the storage unit also stores information related to various settings such as arithmetic expressions, parameters, and threshold values. Each information storage area in the storage unit can be regarded as a storage unit for each information.

  As a storage unit including the setting status storage unit 12 and the priority order storage unit 17, any storage medium that can be used at present or in the future can be used. A register or the like used for calculation can also be regarded as a storage unit. The mode of storage includes not only a mode in which memory is stored for a long time but also a mode in which data is temporarily stored for processing and deleted or updated in a short time.

[Action]
The processing procedure of the present embodiment as described above will be described with reference to FIGS. 3 to 6 in addition to FIGS. FIG. 3 and FIG. 4 are flowcharts in which a processing unit that inputs and outputs information is a block, and the flow of information that is input and output is indicated by a dotted line with a direction indicated by an arrow.

(Overall processing)
In the present embodiment, a description will be given of processing for determining whether or not to perform failover in the own computer when a failure occurs in another computer. When a failure occurs in the own computer, the failure information transmitting unit 21 transmits the failure information 32 via the information transmission network 4 and the monitoring server S, which is another computer that has received the failure information 32, receives the computer. The process for determining whether or not to execute failover is executed.

  In each monitoring server S, when the own computer is available for testing, the flag setting unit 11 sets a test use flag in the own computer. When such a test use flag is set, similarly to the test mode in the conventional monitoring server S, the control information to the grid device, the power plant, the substation, and the linkage system is not transmitted. On the other hand, when the own computer is the online monitoring server S, the test use flag is not set.

  The setting status acquisition unit 13 acquires the setting status of the test use flag of another monitoring server S in the system via the information transmission network 4. The setting status storage unit 12 stores the acquired setting status of the test use flag.

  When the information acquisition unit 15 acquires the failure information 32 of the other computer, the determination unit 16 determines whether or not failover is necessary based on information that distinguishes the degree of failure included in the failure information 32. When the determination unit 16 determines that failover is necessary, the determination unit 16 outputs a failover notification indicating that the execution of failover is determined to the determination unit 18. When the determination unit 16 determines that failover is not necessary, failover is not performed.

  When the determination unit 18 receives a failover notification from the determination unit 16, the determination unit 18 determines whether or not the own computer executes failover. When the determination unit 18 notifies the execution unit 19 that the own computer executes failover, the execution unit 19 performs failover. That is, when the computer in which the failure has occurred is online, the online monitoring control is taken over and executed. If it is a failure in the test, the takeover process in the test is executed.

  The HMI output unit 20 outputs information indicating that the own computer performs failover and information indicating that the own computer does not perform failover to the HMI. By displaying this information on the output device in the HMI, the operator can know whether or not the own computer performs failover.

(Monitoring server decision processing)
Hereinafter, details of the determination process by the determination unit 18 will be described with reference to the flowchart of FIG. 3. First, the notification acquisition unit 181 receives a failover notification from the determination unit 16 (step S101). The comparison result acquisition unit 182 acquires, from the comparison unit 14, a comparison result as to whether or not the setting status of the test use flag of the computer that has output the failure information 32 matches that of the own computer (Step S <b> 102).

  When the setting status of the test use flag matches, the processing of the computer in which the failure has occurred can be taken over. If the setting status of the test use flag does not match, the processing of the computer in which the failure has occurred cannot be taken over. In other words, when a failure occurs in an online computer, the process can be taken over only by an online computer for which the test use flag is not set. On the other hand, the processing of a computer in which a failure has occurred in a test can be taken over only by a computer with the test use flag set.

  If the test usage flag setting statuses do not match, the failure notification unit 184 transmits a failover failure notification indicating that failover cannot be performed to another computer (step S104). In this case, the own computer is excluded from the candidates for the computer that performs failover.

  When the setting state of the test use flag is constant, the selection unit 183 selects the own computer or another computer as the computer that actually performs the failover (step S105). Details of the selection process by the selection unit 183 will be described later.

  When the selecting unit 183 selects the own computer as a computer when executing failover (YES in step S106), the execution notifying unit 185 notifies the other computer of information that the own computer executes failover (step S107). At the same time, the execution notification unit 185 outputs to the execution unit 19 a notification that the own computer executes failover.

  On the other hand, when the selection unit 183 selects that another computer performs failover (NO in step S106), the failure notification unit 184 transmits a failover failure notification of its own computer to the other computer (step S104). . The HMI notification unit 186 notifies the HMI output unit 20 of information on the computer that performs failover, regardless of whether the own computer or another computer performs failover (step S108).

(Monitoring server selection process)
Details of the computer selection process by the selection unit 183 will be described with reference to the flowchart of FIG. First, the priority order acquisition unit 1831 acquires priority order data stored in the priority order storage unit 17 (step S201). The priority determination unit 1832 determines the computer having the highest priority based on the acquired priority data (step S202).

  When the priority order determination unit 1832 determines that the highest-order computer in the priority order is not its own computer (step S202), the availability inquiry unit 1833 determines whether or not the highest-order computer can execute failover. Make an inquiry.

  The availability inquiry unit 1833 receives a notification as to whether or not failover can be executed from the computer having the highest priority (step S203). When the received notification is a notification that the failover can be executed (YES in step S204), the computer determination unit 1836 determines the computer that executes the failover as the computer (step S205).

  When the notification received by the availability inquiry unit 1833 is a notification that the failover cannot be executed (NO in step S204), the priority changing unit 1834 excludes the corresponding computer, and selects the computer with the next ranking. A higher-level computer is set (step S206). The priority changing process is a process for changing the computer determined by the priority determining unit 1832 when selecting a computer to execute failover. For this reason, the priority change unit 1834 does not rewrite the failover execution priority data itself stored in the priority storage unit 17.

  The priority determination unit 1832 determines whether or not the highest-level computer after the change is its own computer (step S202). If the highest-level computer is not its own computer, the same processing as described above is performed (steps S203 to S206).

  On the other hand, when the priority determination unit 1832 determines that the own computer is at the highest level (YES in step S202), the execution availability determination unit 1835 determines whether the own computer can perform failover. The case where failover cannot be performed includes, for example, a situation where the own computer has a minor failure and a situation where the computer load is high and stable system monitoring control cannot be performed. For example, this situation may be stored as information indicating whether or not failover is possible in the storage unit, and determination may be performed based on this information.

  When the execution possibility determination unit 1835 determines that the own computer cannot fail over (NO in step S207), the notification output unit 1837 outputs a notification that the own computer is not executable to the impossibility notification unit 184 (step S209). ).

  When the execution feasibility determination unit 1835 determines that the own computer can be failed over (YES in step S207), the computer determination unit 1836 determines the own computer as a computer that performs failover (step S205), and the failover is performed. Is output to the execution notification unit 185.

(Concrete example)
A specific example of the determination process of the failover computer as described above will be described with reference to FIGS. FIG. 5 shows the priority order in the case of performing failover for the monitoring servers SA to SE, the setting status of the test use flag at the time of failure occurrence or test execution, and information on whether or not failover can be performed.

  FIG. 6 shows an example in which another computer executes failover when the monitoring server SX is performing online operation. FIG. 7 shows an example in which another computer executes failover when the monitoring server SX is performing a test.

  As shown in FIG. 6, when the monitoring server S performs online operation, if a failure actually occurs, the computers that are selected as computers that execute failover are limited to computers that do not have the test use flag set. The In FIG. 5, computers for which the test use flag is not set are the monitoring servers SB, SC, and SD. For this reason, the failover candidate computers are the monitoring servers SB, SC, and SD.

  Among these monitoring servers SB, SC, and SD, the monitoring server SB has the highest priority. Since the monitoring server SB can be failed over, the computer that performs the failover is determined to be the monitoring server SB.

  On the other hand, as shown in FIG. 7, when the monitoring server SX sets a test use flag and performs a test, when a failure occurs in the test, the computer that performs failover sets the test use flag. Limited to computers. In FIG. 5, the computers for which the test use flag is set are the monitoring servers SA and SE. When these two computers are compared, the computer with the highest priority is the monitoring server SA. However, the monitoring server SA cannot be failed over. For this reason, the computer that performs failover is determined to be the monitoring server SE.

[effect]
(1) In the present embodiment, the failure information 32 indicating that a failure has occurred during monitoring control or in a test in the monitoring server S, which is a computer connected via the information transmission network 4 and monitoring and controlling the power system. Monitoring control S as a monitoring server S that performs failover for a failure during monitoring control based on information indicating whether or not the test use set in each monitoring server S is possible. And a determination unit 18 that determines a monitoring server S that can be used as a test.

  For this reason, the monitoring server S that performs failover for a failure during monitoring control, that is, online, and the monitoring server S that performs failover for a failure in a test are determined based on information indicating whether or not test use is possible. It can be determined and distinguished. Therefore, the occurrence of failure in the test is not confused with the actual failure, and it does not interfere with the operation in the actual power system monitoring and control, so it is possible to conduct tests such as online linkage functions including failover. Become. In addition, it is not necessary to prepare a debugging system equivalent to the power system monitoring system that is actually operated, and costs can be saved.

(2) The determination unit 18 includes a selection unit 183 that selects the monitoring server S that performs failover based on the priority order set for each monitoring server S.
For this reason, an appropriate monitoring server S can be selected from the large number of monitoring servers S and failover can be executed.

(3) The selection unit 183 includes an execution availability determination unit 1835 that determines whether the monitoring server S can execute failover.
For this reason, it is possible to execute failover while avoiding the monitoring server S having a minor failure or unstable.

(4) Each monitoring server S includes an information acquisition unit 15, a flag setting unit 11 that sets a test use flag as information indicating whether or not test use is possible for its own monitoring server S, and its own monitoring server The comparison unit 14 determines whether or not the setting status of the test use flag of S matches the setting status of the test use flag of another monitoring server S. Then, the determination unit 18 uses the impossibility notification unit 184 that outputs information indicating that the monitoring server S does not perform failover when the comparison result by the comparison unit 14 does not match, and the comparison unit 14 When it is determined that the comparison results match, the selection unit 183 selects the own monitoring server S or another monitoring server S as the monitoring server S that performs failover based on the priority set in the monitoring server S. And have. Furthermore, the selection unit 183 includes an execution unit 19 that executes failover when the own monitoring server S is selected.

  For this reason, each monitoring server S determines whether or not its own monitoring server S performs failover by comparing it with the setting status of its own test use flag in parallel, thereby distributing the processing. Can be speeded up.

(5) The selection unit 183 includes a priority determination unit 1832 that determines whether or not its monitoring server S is at the highest priority level, and a priority determination unit 1832 that determines that its monitoring server S has priority. When it is determined that it is not at the highest level, it has an availability inquiry unit 1833 that inquires of the highest level monitoring server S whether or not the failover can be executed. Then, the selection unit 183 determines whether or not the own monitoring server S can perform a failover when the priority determining unit 1832 determines that the own monitoring server S is at the highest priority. Based on the response to the inquiry by the availability determination unit 1835 and the availability inquiry unit 1833 or the determination result by the execution availability determination unit 1835, the computer determination unit 1836 for determining the monitoring server S that performs failover is provided.

  For this reason, by setting a common priority, it is possible to prevent the monitoring servers S from overlapping when a large number of the monitoring servers S determine the monitoring server S that performs failover in parallel.

(6) When the availability inquiry unit 1833 receives a notification from the highest-order monitoring server S that failover cannot be executed, the availability inquiry unit 1833 includes a priority change unit 1834 that excludes the monitoring server S from the priority order.
For this reason, according to the situation of each monitoring server S, priority order can be flexibly applied by excluding the monitoring server S which cannot perform failover.

[Second Embodiment]
[Constitution]
The configuration of this embodiment will be described with reference to FIG. This embodiment basically has the same configuration as that of the first embodiment. However, in the present embodiment, each monitoring server S includes an identifier adding unit 22, an identifier confirmation unit 23, and a capture determination unit 24. The identifier adding unit 22 is a processing unit that adds, to the failure information 32 transmitted to the other monitoring server S, a test use identifier indicating that the test use flag is set in the own computer. The failure information 32 transmitted by the failure information transmitting unit 21 is sent as online system information 31 with the test use identifier added by the identifier adding unit 22.

  The identifier confirmation unit 23 is a processing unit that confirms whether or not a test use identifier is added to the failure information 32 included in the online system information 31 acquired from another computer. If the test use flag is not set in the own monitoring server S and the test use identifier is added to the acquired fault information 32, the fetch determination unit 24 does not fetch the fault information 32, and otherwise In this case, it is a processing unit that captures the online system information 31 including the failure information 32. The acquired failure information 32 is used by the determination unit 16 to determine whether failover is necessary.

[Action]
In the present embodiment as described above, for example, when a failure occurs in the own computer or when a test simulating the failure is performed, the failure information transmission unit 21 stores the failure information 32 as in the first embodiment. Send it out. At that time, the identifier adding unit 22 determines whether or not to add a test usage identifier to the failure information 32 according to the setting status of the test usage flag of the own computer stored in the setting status storage unit 12. The identifier adding unit 22 adds the test use identifier to the failure information 32 only when the own computer is in the test use flag setting state.

  The system information acquisition unit 15 receives the online system information 31 including the failure information 32 of other computers as in the first embodiment. The identifier confirmation unit 23 confirms whether or not a test use identifier is added to the failure information 32 included in the received online system information 31. The take-in determination unit 24 determines whether or not the received online system information 31 is to be taken into the own computer based on the confirmation result of the identifier confirmation unit 23.

  That is, when the own computer has not set the test use flag and is operating online, the take-in determination unit 24 excludes the online system information 31 to which the test use identifier is added from being taken in. In other cases, the capture determination unit 24 captures the online system information 31. That is, even when the own computer does not set the test use flag, the online system information 31 to which the test use identifier is not added is fetched. Further, when the own computer sets the test use flag, the online system information 31 is taken in regardless of the presence or absence of the test use identifier. The determination unit 16 determines whether or not failover is necessary based on the captured online system information 31. Other processes are the same as those in the first embodiment.

[effect]
In the present embodiment, an identifier adding unit that adds a test usage identifier indicating that a test usage flag is set to its own monitoring server S to the failure information 32 transmitted from each monitoring server S to another monitoring server S 22, an identifier confirmation unit 23 for confirming whether or not a test usage identifier is added to the failure information 32 acquired from the other monitoring server S by the information acquisition unit 15, and a test usage flag in its own monitoring server S When the test use identifier is not set and the test use identifier is added, the failure information 32 is not captured, and in other cases, the capture determination unit 24 captures the failure information 32.

  Therefore, each monitoring server S holds the flag setting status of the other monitoring servers S and can determine whether or not failover is necessary even if they are not equivalent. Therefore, it is possible to perform a failover test without reducing the traffic of the information transmission network 4 and without affecting the data equivalence due to the transmission delay, as in the first embodiment. It becomes.

[Third Embodiment]
[Constitution]
The configuration of this embodiment will be described with reference to FIGS. In the present embodiment, as shown in FIG. 9, a management server 5 is connected to each monitoring server S via an information transmission network 4. The management server 5 includes a setting status storage unit 12, an information acquisition unit 15, a determination unit 16, a priority order storage unit 17, and a determination unit 18, which are the same as those in the first embodiment or the second embodiment.

  Furthermore, the management server 5 includes a setting status collection unit 25, an execution command transmission unit 26, and a failover information notification unit 27. The setting status collection unit 25 is a processing unit that collects flag setting statuses of all computers in the system. The collected flag setting status is stored in the setting status storage unit 12.

  The execution command transmission unit 26 is a processing unit that transmits a failover execution command 36 to a computer that performs failover. The failover notification unit 27 is a processing unit that notifies all computers in the system that failover is performed.

  On the other hand, as shown in FIG. 10, each monitoring server S has a flag setting unit 11, a system information acquisition unit 15, an execution unit 19, and an HMI output unit, as in the first embodiment or the second embodiment. 20 and a failure information transmission unit 21. However, in the first embodiment or the second embodiment described above, the monitoring server S has, and in the present embodiment, each processing unit included in the system management server 5 is omitted in each monitoring server S. .

[Action]
In the present embodiment as described above, the setting status collection unit 25 of the management server 5 collects flag setting statuses of all computers and stores them in the setting status storage unit 12. When a failure occurs in any of the monitoring servers S or when a test simulating the failure is performed, the system information acquisition unit 15 acquires the failure information 32 as the online system information 31.

  The determination unit 16 determines whether or not to perform failover according to the degree of failure. Based on the flag setting status stored in the setting status storage unit 12, the determination unit 18 is stored in the execution priority storage unit 17 from among the computers that have notified the failure information 32 and the flag setting status is the same. The computer that performs failover is determined according to the execution priority.

  The execution command transmission unit 26 transmits an execution command 36 to the computer that executes failover. The failover information notification unit 27 notifies the failover information 35 on which failover is performed to all the computers.

  The information acquisition unit 15 of the monitoring server S acquires not only the normal online system information 31 of other computers but also the information of computers that perform failover when the management server 5 determines to execute failover. When the management server 5 determines that the computer that performs failover is the own computer, the execution unit 19 receives the execution command 36 and then executes processing to take over online or test monitoring control.

[effect]
In the present embodiment, the management server 5 connected to the information transmission network 4 executes an information acquisition unit 15, a determination unit 18, a setting status collection unit 25 that collects flag setting statuses of all the monitoring servers S, and performs a failover. An execution command transmission unit 26 that transmits a failover execution command 36 to the monitoring server S, and a failover notification unit 27 that notifies all the monitoring servers S that failover has been performed.

  For this reason, the management server 5 can acquire the statuses of all the monitoring servers S in the present system, can collectively manage the operation status, and determines each monitoring server S before determining the monitoring server S that performs failover. It is not necessary to send / receive the execution feasibility determination between the two. For this reason, more rapid failover is possible.

[Fourth Embodiment]
[Constitution]
The configuration of this embodiment will be described with reference to FIGS. 11 and 12. The monitoring server S of this embodiment has basically the same configuration as that of the first embodiment or the second embodiment. However, as shown in FIG. 11, the monitoring server S of the present embodiment includes a system information acquisition unit 28a, a system information selection unit 28b, and a system information storage unit 28c.

  The system information acquisition unit 28a is a processing unit that acquires system information 37 input from the outside. The system information 37 is various data obtained by measurement or the like in the system, and is extremely general data in the field of the power system monitoring device. The system information 37 includes information from other system devices, the monitoring control server S, and the like associated with each other.

  The system information selection unit 28b is a processing unit that selects the system information 37 according to the setting of the test use flag of the own computer. The system information storage unit 28c is a processing unit that stores the system information 37 selected by the system information selection unit 28b.

  The system information selection unit 28b in this embodiment compares the setting of the test use flag of the own computer with the setting of the test use flag added to the system information 37 received from the system information acquisition unit 28a, and agrees. System information 37 is selected.

  Furthermore, as shown in FIG. 12, the monitoring server S is connected to a plurality of gateway (hereinafter referred to as GW) devices 6 that transmit the system information 37 via the information transmission network 4a. The GW apparatus 6 is a relay apparatus that relays information transmission in the information transmission network 4a. Similar to the information transmission network 4 described above, the information transmission network 4a includes a wide range of networks capable of exchanging information.

  Each GW device 6 includes a CPU 7, a line buffer (hereinafter referred to as LB) 8, and a setting status storage unit 12, and is connected to the TC simulation device 9. The CPU 7 is a control unit of the GW device 6. The LB 8 is a processing unit that holds the system information 37 from the TC simulation device 9 and adds the flag setting status from the setting status storage unit 12.

  The TC simulation device 9 is a device that generates and outputs system information 37 in a simulated manner in order to perform a test in the monitoring server S. The TC 10 is a remote monitoring and control device called a telecon, and is a device that collects various system information 37 and outputs it to a control station or the like.

[Action]
In the present embodiment as described above, an operation until the system information 37 generated by the TC simulator 9 is stored in the system information storage unit 28c of the monitoring server S will be described. First, the TC simulator 9 generates system information 37 in a simulated manner. A test use flag stored in the setting status storage unit 12 is added to the generated system information 37 by LB8.

  The system information 37 to which the test use flag is added is broadcast from the LB 8 to the monitoring server S via the CPU 7. The system information acquisition unit 28a in each monitoring server S acquires the system information 37 to which the test use flag is added and outputs it to the system information selection unit 28b.

  The system information selection unit 28 b compares the test use flag added to the system information 37 with the test use flag acquired from the comparison unit 14. As a result of the comparison, the system information selection unit 28b selects and outputs the system information 37 having the same test use flag. The system information storage unit 28c stores the system information 37 selected by the system information selection unit 28b.

  The above operation is similarly performed in the plurality of monitoring servers S that have received the system information 37 transmitted from each GW apparatus 6. As a result, if the test use flag is set in the monitoring server S, the same system information 37 is always stored. That is, in the monitoring server S, the system information 37 with the test use flag added is fetched only by the monitoring server S in which the test use flag is set.

[effect]
The monitoring server S according to the present embodiment is configured so that the monitoring server S has the system information 37 according to the system information acquisition unit 28a that acquires the system information 37 input from the outside and the test use flag of its own monitoring server S. The system information selection unit 28b for selecting the system information, and the system information storage unit 28c for storing the system information 37 selected by the system information selection unit 28b. And the system | strain information selection part 28b selects the system | strain information 37 with which the setting of the own monitoring server S and a test utilization flag corresponds.

  For this reason, among the monitoring servers S, the computer for which the test use flag is set acquires and holds not only information on other computers in the system but also information on the monitoring server S in the linked system as system information 37. It becomes possible. Therefore, a test or the like linked with another system can be executed. Further, since only the system information 37 that matches the setting of the own computer and the test use flag is stored, the storage capacity can be saved.

[Fifth Embodiment]
[Constitution]
The configuration of this embodiment will be described with reference to FIG. This embodiment is basically the same as the fourth embodiment described above. However, in the present embodiment, the system information selection unit 28b in the monitoring server S sets the system usage information acquired by the system information acquisition unit 28a as the test usage flag setting if the test usage flag is set in its own computer. Remember whether or not. In the present embodiment, the GW device 6 also includes an LB 8 connected to the TC 10 that is not a simulation device.

[Action]
In the present embodiment as described above, an operation until the system information 37 generated in the TC simulator 9 or TC 10 is stored in the system information storage unit 30 of the monitoring server S will be described. First, the TC simulation device 9 or the TC 10 generates system information 37. The system information 37 from the TC simulator 9 is simulated as described above. On the other hand, the system information 37 of the TC 10 is not a simulation but real-time information obtained online.

  In the system information 37 from the TC simulator 9, a test use flag stored in the setting status storage unit 12 is added in LB8. A test use flag is not added to the system information 37 from the TC 10. Such system information 37 is broadcast to each monitoring server S via the CPU 7.

  The system information acquisition unit 28a acquires the system information 37 and transmits it to the system information selection unit 28b. The system information selection unit 28b acquires the setting of the test use flag of the own computer from the comparison unit 14. And the system | strain information selection part 28b will memorize | store all the system | strain information 37 in the system | strain information storage part 30, if the test utilization flag is set to the own computer.

[effect]
According to the present embodiment as described above, online system information 37 can be acquired while being a test system monitoring server S, and a failover test or training of the monitoring server S is performed while maintaining a real-time system state. It becomes possible. Even when the monitoring server S may shift from the test system to the online system, the transparency of the online system information 37 is ensured, so that the monitoring server S can smoothly shift in a short time.

[Sixth Embodiment]
[Constitution]
The configuration of this embodiment will be described with reference to FIG. This embodiment is basically the same as the third embodiment shown in FIGS. However, the management server 5 of this embodiment has a setting cancellation unit 29. The setting canceling unit 29 is a processing unit that cancels the test use flag of any computer when the determining unit 18 cannot determine an online computer as a computer that performs failover for an on-line failure during monitoring control. It is.

[Action]
In the present embodiment as described above, first, when there is no online computer that can execute online failover, the determination unit 18 cannot determine the monitoring server S that performs failover. In this case, the setting cancellation unit 29 forcibly cancels the test use flag of the computer for which the test use flag is being set in all the computers.

  For example, the setting cancellation unit 29 transmits a test use flag cancellation command 38 to the computer with the highest failover priority recorded in the priority storage unit 17. Thereby, in the target computer, the flag setting unit 11 cancels the setting of the test use flag of the own computer. After transmitting the cancellation command 38, the management server 5 again executes the process flow for determining the failover target as described above to cause failover.

[effect]
In the present embodiment, when the determination unit 18 cannot determine the monitoring server S that is in the monitoring control as the monitoring server S that performs failover for the failure during the monitoring control, the test use flag of any monitoring server S is determined. A setting canceling unit 29 for canceling the setting.

  Even in a situation where there is no computer that can perform online failover, the test usage flag is forcibly canceled for the computer for which the test usage flag is set, and online failover is performed to increase the redundancy of online operation. It becomes possible. In this case, as in the fifth embodiment described above, if the transparency of the online system information 37 is ensured, a smooth transition can be made in a short time.

[Other Embodiments]
The number of monitoring servers S, management servers 5 and the like in the embodiment is not limited to a specific number. Each part in said embodiment may be implement | achieved in a common computer, and may be implement | achieved by the some computer connected with the information transmission network 4. FIG. The power system monitoring apparatus can be configured as the monitoring server S having each unit as in the above embodiment, or the management server 5.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and gist of the invention, and are also included in the invention described in the claims and the equivalents thereof.

1-3, S, SX, SA-SE Monitoring server 4, 4a Information transmission network 5 Management server 6 GW (gateway) device 7 CPU
8 LB (LineBuffer)
9 TC simulator 10 TC
11 flag setting unit 12 setting status storage unit 13 setting status acquisition unit 14 comparison unit 15 information acquisition unit 16 determination unit 17 priority order storage unit 18 determination unit 181 notification acquisition unit 182 comparison result acquisition unit 183 selection unit 1831 priority order acquisition unit 1832 Priority determining unit 1833 Availability determining unit 1834 Priority changing unit 1835 Executability determining unit 1836 Computer determining unit 1837 Notification output unit 184 Impossible notification unit 185 Execution notification unit 186 HMI notification unit 19 Execution unit 20 HMI output unit 21 Fault information transmission Unit 22 Identifier addition unit 23 Identifier confirmation unit 24 Capture determination unit 25 Setting status collection unit 26 Execution command transmission unit 27 Failover information notification unit 28a System information acquisition unit 28b System information selection unit 28c System information storage unit 29 Setting release unit 31 Online System information 32 Fault information 33 Execution computer information 3 5 Failover information 36 Execution command 37 System information 38 Release command

Claims (13)

An information acquisition unit that acquires a failure information indicating that a failure has occurred during monitoring control or in a test, to a monitoring server that is a plurality of computers connected via an information transmission network and monitors and controls the power system;
Based on the information set for each monitoring server that indicates whether the test can be used or not, the monitoring server that is under monitoring control is determined as the monitoring server that performs failover for the failure during monitoring control, and the failure in the test A determination unit that determines a monitoring server that can be used as a test as a monitoring server that performs failover for
A power system monitoring apparatus comprising:   The power system monitoring apparatus according to claim 1, wherein the determination unit includes a selection unit that selects a monitoring server that performs failover based on the priority order set for each monitoring server.   The power system monitoring apparatus according to claim 2, wherein the selection unit includes an execution availability determination unit that determines whether the monitoring server can execute failover. Each monitoring server
The information acquisition unit;
A flag setting unit that sets a test use flag as information indicating whether or not the test use is possible for its own monitoring server;
A comparison unit that determines whether or not the setting status of the test use flag of its own monitoring server matches the setting status of the test use flag of another monitoring server;
Have
The determination unit
When it is determined that the comparison result by the comparison unit does not match, the non-notification unit that outputs information indicating that the own monitoring server does not perform failover, and
A selection unit that selects its own monitoring server or another monitoring server as a monitoring server that performs failover based on the priority set for each monitoring server when it is determined that the comparison results by the comparison unit match When,
Have
When the selection unit selects its own monitoring server, an execution unit that performs failover;
The power system monitoring apparatus according to claim 1, comprising: The selection unit is
A priority determination unit that determines whether or not its own monitoring server is at the highest priority,
When the priority determination unit determines that its own monitoring server is not at the highest priority level, an availability inquiry unit that inquires whether or not failover can be executed to the highest monitoring server;
When the priority determination unit determines that its own monitoring server is at the highest priority level, an execution determination unit that determines whether or not its own monitoring server can perform failover; and
Based on the determination result by the response or execution determination unit to the inquiry by the front hear Inatoigo unit, a computer determining unit that determines the monitoring server to perform failover,
The power system monitoring apparatus according to claim 4, comprising:   6. The priority change unit that excludes the monitoring server from priority when the availability inquiry unit receives a notification that failover cannot be performed from the highest level monitoring server. Power system monitoring device. Each monitoring server
A determination unit that determines whether or not failover is necessary based on the failure information;
An identifier adding unit that adds a test use identifier indicating that the test use flag is set to the own monitoring server to the failure information transmitted to the other monitoring server;
An identifier confirmation unit for confirming whether or not a test use identifier is added to the failure information acquired by the information acquisition unit from another monitoring server;
If the test use flag is not set on the own monitoring server and the test use identifier is added to the acquired fault information, the fault information is not fetched. And
The power system monitoring device according to any one of claims 4 to 6, wherein The monitoring server is
A system information acquisition unit that acquires system information data input from outside;
Depending on the setting of the test use flag of its own monitoring server, and the system information selection unit for selecting strains information data,
A system information storage unit that stores system information data selected by the system information selection unit;
The power system monitoring apparatus according to any one of claims 4 to 7, wherein   9. The power system monitoring apparatus according to claim 8, wherein the system information selection unit selects system information data in which the setting of the test use flag matches that of its own monitoring server. A management server connected to the information transmission network,
The information acquisition unit;
The determination unit;
A setting status collection unit that collects the test usage flag setting status of all monitoring servers;
An execution command transmission unit that transmits a failover execution command to a monitoring server that performs failover;
A failover notification unit that notifies all monitoring servers that failover has occurred,
The power system monitoring apparatus according to claim 1, comprising:   A setting cancellation unit that cancels the setting of the test use flag of any monitoring server when the determination unit cannot determine a monitoring server that is under monitoring control as a monitoring server that performs failover for a failure during monitoring control. The power system monitoring apparatus according to claim 10, comprising: A computer or electronic circuit
Information acquisition processing for acquiring failure information indicating that a failure has occurred during monitoring control or in a test, to a monitoring server that is a computer that is connected via an information transmission network and that monitors and controls the power system;
Based on the information set for each monitoring server that indicates whether the test can be used or not, the monitoring server that is under monitoring control is determined as the monitoring server that performs failover for the failure during monitoring control, and the failure in the test Decision processing to determine a monitoring server that can be used as a test as a monitoring server that performs failover for
The power system monitoring method characterized by performing. On the computer,
Information acquisition processing for acquiring failure information indicating that a failure has occurred during monitoring control or in a test, to a monitoring server that is a computer that is connected via an information transmission network and that monitors and controls the power system;
Based on the information set for each monitoring server that indicates whether the test can be used or not, the monitoring server that is under monitoring control is determined as the monitoring server that performs failover for the failure during monitoring control, and the failure in the test Decision processing to determine a monitoring server that can be used as a test as a monitoring server that performs failover for
A power system monitoring program characterized in that

Images